Method and Architecture for a Scalable Application and Security Switch Using Multi-Level Load Balancing

1. An application switch comprising: a first I/O interface coupled to a backplane, the first I/O interface configured for receiving one or more packets in a forward flow from a first client device; a plurality of data processors, each data processor communicatively coupled to the first I/O interface via the backplane and configured for operating upon received forward flow packets; an application processor communicatively coupled to the plurality of data processors via the backplane, the application processor configured for generating a session structure including instructions for processing received forward flow packets; and wherein the first I/O interface is further configured for executing a data processor load balancing algorithm and selecting a target one of the plurality of data processors to process the forward flow packets, and the application processor is further configured for transferring the session structure to the selected target data processor for processing the forward flow packets and for predictively offloading processing of a reverse flow associated with the forward flow to one of the plurality of data processors.

2. The switch in accordance with claim 1 wherein the session structure comprises one or more actions to be performed on the forward flow packets.

3. The switch in accordance with claim 1 wherein the application processor is further configured for: selecting one of the plurality of data processors to process the reverse flow in accordance with the data processor load balancing algorithm; generating a reverse session structure for the reverse flow that identifies one or more actions to be performed on the reverse flow; and offloading the reverse session structure to the data processor selected to process the reverse flow.

4. The switch in accordance with claim 3 wherein selecting one of the plurality of data processors to process the reverse flow is based at least in part on source/destination information related to the forward flow.

5. The switch in accordance with claim 3 wherein the application processor is further configured for redirecting the reverse flow to the selected target data processor.

6. The switch in accordance with claim 3 wherein the reverse session structure comprises a redirection session for instructing the data processor selected to process the reverse flow to redirect data packets of the reverse flow to the selected target data processor.